MoviePlay LST File Handling Buffer Overflow Vulnerability
BID:21840
Info
MoviePlay LST File Handling Buffer Overflow Vulnerability
| Bugtraq ID: | 21840 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-0016 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 02 2007 12:00AM |
| Updated: | Jun 08 2007 06:40PM |
| Credit: | Discovered by Parvez Anwar. |
| Vulnerable: |
Netfarer.com MoviePlay 4.76 |
| Not Vulnerable: | |
Discussion
MoviePlay LST File Handling Buffer Overflow Vulnerability
MoviePlay is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Exploiting this vulnerability allows attackers to execute arbitrary machine code in the context of the affected application.
MoviePlay 4.76 is reported vulnerable; other versions may be affected as well.
MoviePlay is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Exploiting this vulnerability allows attackers to execute arbitrary machine code in the context of the affected application.
MoviePlay 4.76 is reported vulnerable; other versions may be affected as well.
Exploit / POC
MoviePlay LST File Handling Buffer Overflow Vulnerability
Sample exploit code has been provided:
Sample exploit code has been provided:
Solution / Fix
MoviePlay LST File Handling Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
MoviePlay LST File Handling Buffer Overflow Vulnerability
References:
References:
- MoviePlay Product Page (Netfarer.com)